Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -158,7 +158,7 @@ jobs:
with:
node-version: "22"
- uses: astral-sh/setup-uv@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: "21"
Expand Down Expand Up @@ -356,7 +356,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: "17"
Expand All @@ -377,7 +377,7 @@ jobs:
timeout-minutes: 45
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: "17"
Expand Down Expand Up @@ -518,7 +518,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: "17"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ jobs:
- uses: actions/checkout@v7
- name: Setup Java (Android)
if: matrix.language == 'java-kotlin'
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: temurin
java-version: "17"
Expand Down
16 changes: 8 additions & 8 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -96,55 +96,55 @@ jobs:
run: bash scripts/pre-release-gate.sh

- name: Generate root SBOM
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: .
format: cyclonedx-json
output-file: sbom.cyclonedx.json

- name: Generate web stack SBOM slice
if: hashFiles('examples/web/package.json') != ''
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: examples/web
format: cyclonedx-json
output-file: sbom-web.cyclonedx.json

- name: Generate python stack SBOM slice
if: hashFiles('examples/python/pyproject.toml') != ''
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: examples/python
format: cyclonedx-json
output-file: sbom-python.cyclonedx.json

- name: Generate node stack SBOM slice
if: hashFiles('examples/node/package.json') != ''
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: examples/node
format: cyclonedx-json
output-file: sbom-node.cyclonedx.json

- name: Generate android stack SBOM slice
if: hashFiles('examples/android/app/build.gradle.kts') != ''
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: examples/android
format: cyclonedx-json
output-file: sbom-android.cyclonedx.json

- name: Generate rust stack SBOM slice
if: hashFiles('examples/rust/Cargo.lock') != ''
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: examples/rust
format: cyclonedx-json
output-file: sbom-rust.cyclonedx.json

- name: Generate go stack SBOM slice
if: hashFiles('examples/go/go.sum') != ''
uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.20.6
uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.20.6
with:
path: examples/go
format: cyclonedx-json
Expand Down Expand Up @@ -200,7 +200,7 @@ jobs:
with:
ref: ${{ inputs.tag || github.event.release.tag_name || github.ref }}

- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
if: steps.sign.outputs.present == 'true'
with:
distribution: temurin
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
- uses: actions/checkout@v7
with:
persist-credentials: false
- uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
- uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
with:
results_file: results.sarif
results_format: sarif
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/weekly-health-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -238,7 +238,7 @@ jobs:
timeout-minutes: 45
steps:
- uses: actions/checkout@v7
- uses: actions/setup-java@v5
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: "17"
Expand Down
Loading